Privacy Policy — gool111

1 Data Controller Information

gool111 acts as the data controller for all personal information collected through the gool111 platform, including the website, any associated mobile-optimised interface, and all related support channels. As the data controller, gool111 determines the purposes and means by which your personal data is processed.

For all privacy-related enquiries, data subject access requests, or concerns regarding the handling of your personal information, you may contact our dedicated data privacy team. All such communications should be directed to the following email address (plain text, not a clickable link):

Privacy Contact: support@gool111 — please include "Privacy Request" in the subject line of your message.

gool111 is committed to handling all privacy enquiries professionally and within the timeframes set out in Section 8 (Your Privacy Rights) of this policy. We acknowledge all privacy requests within 3 business days of receipt.

2 Personal Data We Collect

gool111 collects personal data from you in the following ways: directly when you register an account or interact with our platform, automatically as you navigate and use the site, and from verified third-party sources where permitted for identity and payment verification purposes.

Registration & Account Data

When you create a gool111 account, we collect the following information:

• Full legal name as it appears on your government-issued identification.
• Date of birth (used for mandatory 18+ age verification).
• Residential address in Bangladesh (district, city, postcode).
• Mobile number registered to your preferred payment method (bKash, Nagad, Rocket, or Upay).
• Email address (if provided as an optional secondary contact method).
• Username and hashed (encrypted) password for account access.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance programme, we may collect and securely store:

• Copies of government-issued photo identification (National Identity Card or passport).
• Proof of address documentation (utility bill or bank statement dated within 90 days).
• Selfie photographs submitted alongside photo ID for identity confirmation.
• Screenshots or confirmation references from your registered mobile banking account.

Financial Transaction Data

When you make deposits or request withdrawals, gool111 records:

• Transaction amounts in Bangladeshi Taka (BDT).
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, or card).
• Transaction reference numbers and timestamps.
• Account balance history and bonus credit/debit records.

Technical & Usage Data

When you access gool111, our servers and analytics systems automatically record:

• IP address and approximate geographic location (city-level).
• Device type, operating system, browser type, and version.
• Pages visited, time spent on each page, and navigation path through the site.
• Game sessions initiated, bet amounts placed, and game outcomes (for fairness auditing and responsible gaming monitoring).
• Session start and end times, login frequency, and account activity timestamps.

Communications Data

If you contact our customer support team via live chat or email, we retain records of that correspondence including the content of your messages, the date and time of communication, and any resolution actions taken. This information is retained for quality assurance, dispute resolution, and compliance purposes.

3 Legal Basis for Processing

gool111 processes your personal data only when a valid legal basis exists for doing so. The primary legal bases on which we rely are set out below:

• Contractual Necessity: Processing your name, contact details, payment information, and account data is necessary to fulfil the contract between you and gool111 — specifically, to maintain your player account, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal Obligation: gool111 is required to collect and retain certain data — including KYC identity documents and financial transaction records — to comply with applicable anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gaming obligations.
• Legitimate Interests: We process technical and usage data to maintain platform security, detect fraud, prevent bonus abuse, improve user experience, and conduct internal analytics. These processing activities serve our legitimate business interests and do not override your fundamental privacy rights.
• Consent: Where we process data for optional purposes — such as sending you promotional emails about new bonuses, seasonal offers, or relevant game releases — we will seek your explicit consent at the time of data collection. You may withdraw consent for marketing communications at any time via your account profile settings.

4 How We Use Your Data

gool111 uses the personal data we collect for the following specific purposes:

Account Management & Service Delivery

• Creating, maintaining, and managing your gool111 player account.
• Verifying your identity and age (18+ compliance) during registration and KYC review.
• Processing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and linked bank accounts.
• Crediting bonus funds, tracking wagering requirement progress, and applying promotional rewards.
• Providing 24/7 customer support and resolving account-related queries or disputes.

Security & Fraud Prevention

• Monitoring account activity for signs of unauthorised access, suspicious login patterns, or unusual betting behaviour.
• Detecting and preventing multi-accounting, bonus abuse, and the use of automated betting software.
• Conducting AML screening on transaction patterns to identify and report suspicious financial activity as required by applicable law.
• Storing device fingerprints and IP addresses to identify and block fraudulent account registrations.

Responsible Gaming Compliance

• Monitoring play patterns to identify players who may be exhibiting signs of problem gambling behaviour.
• Enforcing self-exclusion periods, deposit limits, session time limits, and cool-off requests set by you or applied by our responsible gaming team.
• Communicating responsible gaming resources and support information to players who may need assistance.

Platform Improvement & Analytics

• Analysing aggregated, anonymised usage data to improve website performance, navigation, and game content offerings.
• Conducting A/B testing on page layouts and promotional messaging to enhance the player experience.
• Generating internal business reports and player segmentation insights for product development purposes.

Marketing & Promotions (Consent-Based)

• Sending you personalised bonus offers, seasonal promotions (Eid, Pohela Boishakh, Victory Day campaigns), and new game announcements — only where you have consented to receive such communications.
• Delivering targeted on-platform promotional content based on your game preferences and activity history.

5 Data Sharing & Third Parties

gool111 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We may share specific categories of your data with carefully selected third parties only where necessary for the lawful operation of the Platform, as detailed below:

Payment Processing Partners

To process your deposits and withdrawals, gool111 shares the minimum necessary transaction data with your selected payment provider. This may include your registered mobile number and transaction amount when processing payments via bKash, Nagad, Rocket, or Upay, and card or account reference details for bank transfer or card transactions. These providers process your data under their own privacy policies and are independently responsible for their data handling practices.

Game Content Providers

Casino games on gool111 are supplied by licensed third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers and game outcome data necessary to deliver the game experience and conduct fairness auditing. No personally identifiable information beyond a session reference is transmitted to game providers during standard play.

Identity Verification Services

Where gool111 uses a third-party KYC verification service provider to automate the review of identity documents, your submitted documents and personal details will be shared with that provider solely for the purpose of completing verification. KYC providers are contractually bound to process your data only for verification purposes and to maintain equivalent data security standards.

Legal & Regulatory Authorities

gool111 may be legally required to disclose player data — including identity information, account history, and financial transaction records — to relevant law enforcement authorities, financial intelligence units, or regulatory bodies in Bangladesh or internationally, in response to a valid legal order, warrant, or compliance obligation. We will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gool111's business assets, player data held by gool111 may be transferred to the acquiring entity as part of that transaction. In such circumstances, gool111 will notify affected players in advance and ensure that your data continues to be handled in accordance with this Privacy Policy or an equivalent standard.

6 Cookies & Tracking Technologies

gool111 uses cookies and similar tracking technologies to operate the Platform effectively, personalise your experience, maintain session security, and gather analytics data to improve our services. This section explains the types of cookies we use and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and deliver a consistent user experience. Cookies can be session-based (deleted when you close your browser) or persistent (stored for a defined period).

Types of Cookies Used by gool111

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. For all other cookie categories, you may manage your preferences through your browser settings. Most modern browsers allow you to block or delete cookies, restrict third-party cookies, or receive a notification before a cookie is placed. Please note that disabling certain cookies may affect the functionality and performance of gool111.

For detailed guidance on managing cookies in your specific browser, refer to your browser's official help documentation. Common browsers used in Bangladesh include Google Chrome, Mozilla Firefox, Samsung Internet, and Opera Mini — each provides accessible cookie management options in their privacy or settings menus.

7 Data Retention Periods

gool111 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention schedule applies to the primary categories of data we hold:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate statistical purposes.

8 Your Privacy Rights

As a registered player or visitor to gool111, you hold the following rights in relation to your personal data. gool111 is committed to honouring these rights promptly and without unnecessary barriers:

Right of Access

You have the right to request a copy of all personal data that gool111 holds about you. This is commonly referred to as a Subject Access Request (SAR). Upon receiving a valid SAR, gool111 will provide you with a comprehensive data summary within 30 days. To submit an access request, contact us at support@gool111 with "Data Access Request" in the subject line.

Right to Rectification

If any personal data held by gool111 is inaccurate or incomplete, you have the right to request correction. You may update most account details directly through your account profile settings. For corrections to identity or KYC documents, please contact the support team directly.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. Please note that gool111 may be required to retain certain data for legal compliance purposes even after receiving an erasure request — in such cases, we will explain the basis for continued retention clearly.

Right to Restrict Processing

You have the right to request that gool111 restricts the processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved, or where you have objected to processing and a determination is pending.

Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that this data be transmitted directly to another service provider where technically feasible.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on gool111's legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.

Rights Related to Automated Decision-Making

gool111 uses automated systems for certain compliance and fraud detection processes. Where an automated decision produces a significant legal or similarly significant effect on you (such as account suspension triggered by automated fraud detection), you have the right to request human review of that decision. Contact our support team to initiate a manual review of any automated decision you believe is incorrect.

9 Data Security Measures

Protecting the security of your personal data is a core operational priority at gool111. We maintain a comprehensive set of technical and organisational security measures designed to prevent unauthorised access, accidental loss, disclosure, alteration, or destruction of your personal information.

Technical Safeguards

• 256-bit SSL/TLS Encryption: All data transmitted between your device and gool111 servers is encrypted using industry-standard Secure Socket Layer (SSL) technology, ensuring that your personal and financial data cannot be intercepted in transit.
• Password Hashing: Your account password is never stored in plain text. gool111 uses modern cryptographic hashing algorithms to store password credentials securely.
• Two-Factor Authentication (2FA): gool111 strongly recommends enabling 2FA on your account to add a second layer of protection against unauthorised login attempts.
• Firewalls & Intrusion Detection: Our server infrastructure is protected by enterprise-grade firewalls, real-time intrusion detection systems, and regular vulnerability scanning to identify and remediate security weaknesses proactively.
• Access Controls: Access to personal data within gool111's internal systems is strictly limited to authorised personnel on a need-to-know basis. All internal data access is logged and subject to regular audit.

Organisational Safeguards

• All gool111 staff who handle personal data receive regular training on data protection best practices and the requirements of this Privacy Policy.
• Third-party service providers who process data on behalf of gool111 are contractually required to maintain security standards equivalent to those applied by gool111 itself.
• gool111 maintains an incident response plan for data breaches, including procedures for assessing impact, containing breaches, and notifying affected individuals where required.

Reporting a Security Concern

If you believe your gool111 account has been compromised, or if you discover a potential security vulnerability on the Platform, please contact us immediately at support@gool111 with "Security Concern" in the subject line. Our security team will investigate all reports promptly.

10 Updates to This Policy

gool111 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — gool111 will notify registered players via their registered contact details at least 7 days before the updated policy takes effect. For minor or clarificatory changes, the updated policy will be published on this page without prior individual notice.

We encourage you to review this Privacy Policy periodically to stay informed about how gool111 protects your personal information. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated policy. If you do not agree with the revised terms, you should cease using gool111 and may request account closure as described in our Terms & Conditions.